CVE-2001-1056

IRC DCC helper in the ipmasqirc IP masquerading module 2.2 allows remote attackers to bypass intended firewall restrictions by causing the target system to send a "DCC SEND" request to a malicious server which listens on port 6667, which may cause the module to believe that the traffic is a valid...

CVE-2001-1289

Quake 3 arena 1.29f and 1.29g allows remote attackers to cause a denial of service crash via a malformed connection packet that begins with several char-255 characters...

Sambar Server pagecount CGI Traversal Arbitrary File Overwrite

By default, there is a pagecount script with Sambar Web Server located at http://sambarserver/session/pagecount This counter writes its temporary files in c:\sambardirectory\tmp. It allows to overwrite any files on the filesystem since the 'page' parameter is not checked against '../../' attacks...

CVE-2001-0588

sendmail 8.9.3, as included with the MMDF 2.43.3b package in SCO OpenServer 5.0.6, can allow a local attacker to gain additional privileges via a buffer overflow in the first argument to the command...

CVE-2001-0555

ScreamingMedia SITEWare versions 2.5 through 3.1 allows a remote attacker to read world-readable files via a .. dot dot attack through 1 the SITEWare Editor's Desktop or 2 the template parameter in SWEditServlet...

CVE-2001-0350

Summary: CVE-2001-0350 affects Microsoft Windows 2000 Telnet Service, where the service creates named pipes with predictable names and does not verify them, enabling unprivileged local users to execute arbitrary code in the Local System context by providing a malicious named pipe and triggering c...

CVE-2001-0583

CVE-2001-0583 affects Alt-N Technologies MDaemon 3.5.4. A remote attacker can cause a denial of service by issuing a request to a MS-DOS device endpoint (e.g., GET /aux) on the Worldclient service (port 3000) or the Webconfig service (port 3001). The available documents do not provide remediation...

CVE-2001-0607

asecure as included with HP-UX 10.01 through 11.00 can allow a local attacker to create a denial of service and gain additional privileges via unsafe permissions on the asecure program, a different vulnerability than CVE-2000-0083...

CVE-2001-0633

Directory traversal vulnerability in Sun Chili!Soft ASP on multiple Unixes allows a remote attacker to read arbitrary files above the web root via a '..' dot dot attack in the sample script 'codebrws.asp'...

CVE-2001-0598

CVE-2001-0598 affects Symantec Ghost 6.5 and earlier. A remote attacker can cause a denial of service by sending large (>45 KB) data to the Ghost Configuration Server on port 1347, triggering an unhandled error. Public details confirm the vulnerable component is the Ghost Configuration Server,...

CVE-2001-0562

CVE-2001-0562 affects the a1disp.cgi component of Drummond Miles A1Stats prior to version 1.6. The initial description documents a remote command execution vulnerability where a crafted URL containing shell metacharacters can force the execution of arbitrary commands on the server. The impact is ...

CVE-2001-0609

CVE-2001-0609 affects Infodrom cfingerd 1.4.3 and earlier. A format string vulnerability in the ident reply that is passed to the syslog function enables a remote attacker to gain additional privileges. Several connected sources corroborate that cfingerd’s logging/ident handling allows privilege ...

CVE-2001-0604

CVE-2001-0604 affects Lotus Domino R5 prior to 5.0.7. The vulnerability allows a remote attacker to induce a denial of service by sending URL requests (>8 KB) containing a large number of '/' characters. The issue is due to how such requests are processed, enabling a partial availability impac...

CVE-2001-0605

The CVE-2001-0605 issue affects Headlight Software MyGetright prior to version 1.0b. A remote attacker can upload and/or overwrite arbitrary files by delivering a malicious .dld (skins-data) file containing long strings of random data. The vulnerability is described with partial impacts to confid...

CVE-2001-0523

eEye SecureIIS versions 1.0.3 and earlier allows a remote attacker to bypass filtering of requests made to SecureIIS by escaping HTML characters within the request, which could allow a remote attacker to use restricted variables and perform directory traversal attacks on vulnerable programs that...

CVE-2001-0534

CVE-2001-0534 concerns buffer overflows in radiusd. Connected documents show a related, later issue: yardradius (YARD radius server) with a stack/remote overflow that could allow execution of arbitrary code as root. Debian’s DSA-598-1 (CAN-2004-0987) states yardradius is vulnerable to a remote st...

CVE-2001-0600

CVE-2001-0600 affects Lotus Domino R5 prior to 5.0.7. The vulnerability allows a remote attacker to cause a denial-of-service by making repeated URL requests using the same HTTP headers (e.g., Accept, Accept-Charset, Accept-Encoding, Accept-Language, Content-Type). The issue is documented by NVD ...

CVE-2001-0498

Transparent Network Substrate TNS over Net8 SQLNet in Oracle 8i 8.1.7 and earlier allows remote attackers to cause a denial of service via a malformed SQLNet connection request with a large offset in the header extension...

CVE-2001-0521

CVE-2001-0521 affects Aladdin eSafe Gateway versions 3.0 and earlier. The issue allows a remote attacker to bypass the gateway’s HTML SCRIPT filtering by using Unicode-encoded SCRIPT tags within the HTML document. This describes a filtering bypass in the web gateway; the documents do not provide ...

CVE-2001-0577

CVE-2001-0577 concerns a local-privilege escalation in SCO OpenServer 5.0–5.0.6, where a buffer overflow in the first command-line argument can allow a local attacker to gain additional privileges. The affected software is SCO OpenServer 5.0 through 5.0.6; the underlying cause is a buffer overflo...